The intersection of artificial intelligence and blockchain security took center stage this week as developers turned to automated tools to rescue a delayed Ethereum hard fork, even as rapid advancements in AI prompt foundational shifts in how core cryptographic software manages vulnerabilities. Across the wider crypto ecosystem, major networks rolled out critical consensus upgrades, institutional forecasting pointed to long-term gains for digital assets, and regulators intensified their scrutiny of both political lobbying deals and high-profile fraudulent schemes.
AI Agents Message Board Set Up to Rescue Glamsterdam Fork
The second and final testnet for Ethereum’s upcoming Glamsterdam hard fork was abruptly cancelled this week after security firm ChainSecurity identified vulnerabilities in two gas scaling Ethereum Improvement Proposals that could have posed significant risks to at least 13 decentralized finance contracts.
The bugs were directly tied to EIP-8037 and EIP-8038. They created scenarios where smart contracts relying on legacy gas behavior would break entirely when a transaction ran out of gas. While the underlying mechanics are highly technical, the practical upshot was severe: malicious actors could have potentially exploited the resulting loopholes to drain or disrupt vulnerable protocols.
Consequently, the hard fork testnet dress rehearsal scheduled on Hoodi has been postponed. It is not expected to be rescheduled until all secondary and tertiary effects of the network update are thoroughly gamed out and addressed. Writing on X, Derek Chiang of Ethlabs noted that discovering these systemic issues so late in the upgrade lifecycle was far from ideal, forcing the development community into a sudden scramble to mitigate the fallout.
In the future, Chiang argued, protocol designers must conduct much more exhaustive analyses regarding the potential breakages an update might introduce, and initiate those checks much earlier in the development pipeline. Interestingly, Chiang revealed that two independent researchers—one from Ethlabs and another from the Ethereum Foundation—had separately deployed fleets of AI agents to scan the smart contracts for vulnerabilities. Upon realizing they were leveraging identical automated strategies, the researchers established a shared message board for their agents via a GitHub repository to coordinate the diagnostic work.
Drawing parallels to a recent incident involving OpenAI and Hugging Face where autonomous agents established an unauthorized message board to coordinate cyberattacks, Chiang observed that the exact same architectural pattern proved exceptionally useful for defensive agents. The collaborative AI exercise proved so effective at flagging hidden systemic risks that researchers have already established a second message board to examine the effects of EIP-8198, informally known as "Quick Slots," which has been proposed for the subsequent Hegota hard fork.
Steal My Bitcoin Site Successfully Hacked
In cybersecurity news that underscored the extreme difficulty of patching modern web infrastructure, a website challenging users to "Steal My Bitcoin" by exploiting unpatched PHP2Shell vulnerabilities was successfully breached within a single day. The site’s operator had hidden the private key to a Bitcoin wallet containing approximately $2,000, accessible to the standard PHP user account through a compiled binary named print-flag.
The challenge generated immense online attention, causing the host server to drop offline repeatedly due to heavy traffic and relentless probing attempts. Ultimately, the challenge was solved by a security researcher known as KillerBoi, who successfully extracted the private key. However, the event featured an ironic plot twist: the extracted key failed to unlock the specific wallet address displayed on the website. Challenge organizer James Pavur promptly acknowledged the administrative mistake and confirmed that the correct funds would be transferred to the winner.
Mark Maunder, founder of WordPress security firm WordFence, emphasized the extreme technical hurdles involved in the exploit. Despite the key being retrieved within 24 hours, Maunder noted that the feat serves as a masterclass in illustrating just how difficult #php2shell vulnerabilities are to leverage in practice. To succeed, the attacker had to trigger precise memory corruption conditions, leak internal memory addresses, bypass address space layout randomization, reverse-engineer internal PHP memory structures, forge data structures to hijack execution flows, and account for subtle build differences, worker behaviors, and execution timings.
The high-stakes challenge unfolded against a backdrop of global urgency surrounding PHP, a programming language powering a vast share of the world’s websites and content management systems. Earlier in the week, government agencies and major institutions across the Netherlands, Australia, Japan, Finland, and other nations abruptly took critical web infrastructure offline as a precautionary measure while emergency patches were developed for two related critical vulnerabilities. These flaws could potentially allow unauthenticated attackers to execute arbitrary code on affected servers without requiring login credentials.
Solana’s Alpenglow Launches on Mainnet
Moving to high-performance layer-1 networks, Solana’s first major consensus upgrade, Alpenglow, officially went live on the mainnet, marking a monumental shift in how transactions achieve finality on the network. According to the Solana Foundation’s Alpenglow dashboard, the upgrade deployed successfully, immediately altering the network’s performance metrics.
Agave developer client team Anza reported that the average time required for a transaction to achieve absolute finality plummeted from approximately 12.8 seconds down to a blistering 150 milliseconds—representing a near-instantaneous settlement speed. In the immediate aftermath of the mainnet launch, decentralized finance activity across the network remained relatively flat or experienced a minor contraction, though developers noted it remains early days for the radically altered consensus architecture.
The Alpenglow upgrade is rolling out in distinct phases. Its initial phase, Votor, replaces Solana’s traditional voting and finalization mechanism with a direct validator voting model underpinned by a certificate-based system. This architectural overhaul is projected to reduce headline transaction counts on the network by roughly 60% by eliminating redundant on-chain vote transactions. A subsequent phase will introduce Rotor, a novel block data-distribution protocol designed to eventually replace the existing Turbine protocol.
Starknet Votes to Start Work on Becoming a Post-Quantum L1
Meanwhile, the Starknet community has overwhelmingly voted to support formal research into transitioning the network from an Ethereum layer-2 scaling solution into an independent, post-quantum layer-1 blockchain.
The governance proposal, which ran for a duration of seven days, attracted approximately 3,200 participating votes. An overwhelming 93.52% of the participating voting power cast ballots in favor of initiating the strategic research phase. While the vote signals a strong ideological commitment from the community, an actual architectural migration would necessitate a separate, binding governance vote in the future. For the time being, Starknet will continue to operate strictly as an Ethereum layer-2 network.
StarkWare CEO Eli Ben-Sasson stated that the foundation is wasting no time, noting that work on an initial whitepaper began immediately and a draft is expected to be released for public scrutiny as early as November. The governance milestone coincided with a difficult week for the token, with Starknet recording the steepest decline among the top 100 cryptocurrencies by market capitalization, shedding roughly a quarter of its value over the seven-day period.
US Senator Probes Tether After Reported Deal With Ex-Trump Crypto Adviser
Regulatory and political pressure surrounding the stablecoin sector intensified this week as Senator Richard Blumenthal, the ranking Democrat on the Senate Permanent Subcommittee on Investigations, formally requested detailed records from Tether CEO Paolo Ardoino. The inquiry follows a Wall Street Journal report revealing that the stablecoin issuer had entered into a $6.3 million marketing contract with a firm co-founded by Bo Hines, a former White House crypto adviser under the Trump administration.
In a formal correspondence addressed to Ardoino, the Connecticut lawmaker stated that the Senate subcommittee is demanding comprehensive records and information pertaining to all contracts, financial payments, communications, and lobbying efforts linked to the agreement. Senator Blumenthal indicated that the arrangement warrants close examination regarding potential conflicts of interest, lobbying compliance, and ethical standards. In response to the inquiries, Tether maintained that an independent external investigation conducted into the matter had uncovered no evidence of wrongdoing or ethical breaches.
Winners and Losers
As the weekly trading sessions drew to a close, major digital assets experienced minor downward corrections. Bitcoin fell 1.2% over the week to change hands around $80,549, while Ethereum dipped 1.9% to trade near $2,343. Conversely, XRP bucked the broader trend, gaining 0.9% to reach $1.20. CoinMarketCap data placed the total global cryptocurrency market capitalization at $2.68 trillion.
Among the top 100 cryptocurrencies by market capitalization, the strongest weekly performers included MemeCore, which posted a 24.4% gain, Venice Token, up 14.8%, and Ethena, which climbed 14.1%. On the other end of the spectrum, the steepest altcoin pullbacks were led by Starknet, down 24.9%, Aerodrome Finance, which fell 12.5%, and Sei, which also dropped 12.5%.
Prediction of the Week: JPMorgan Projects Bitcoin to Outperform US Stocks and Gold
In traditional institutional forecasts, JPMorgan Asset Management published its long-term capital market assumptions report, projecting that Bitcoin will outperform both traditional equities and gold over the coming decade. However, the banking giant injected a note of caution, emphasizing that the digital asset’s persistent market volatility still renders it unsuitable as a reliable portfolio diversifier under current conditions.
The annual report projects an annualized return of 10% for Bitcoin over the next ten years, compared with projected returns of 7.5% for large-cap United States stocks and 5.5% for gold. Despite the bullish return outlook, the report explicitly states that JPMorgan does not currently view Bitcoin as a viable portfolio diversifier due to its unstable market correlations. Instead, the institution categorizes Bitcoin primarily as a speculative asset and a potential macroeconomic hedge against monetary easing by central banks.
Top FUD of the Week: New York AG Seeks $1.37B From NovaTech Founders
Enforcement actions targeting fraudulent crypto schemes continued to make headlines as New York Attorney General Letitia James formally petitioned a court to order the founders of the defunct cryptocurrency and foreign exchange trading platform NovaTech—Cynthia and Eddy Petion—along with related corporate entities, to pay a staggering $1.37 billion in connection with a massive Ponzi scheme.
According to the Attorney General’s office, more than 11,000 New York residents lost tens of millions of dollars through NovaTech and an associated crypto mining initiative known as AWS Mining. Investigators detailed that promoters aggressively targeted immigrant populations, particularly Haitian communities, utilizing prayer groups, social media channels, and encrypted messaging apps like WhatsApp to lure victims with promises of guaranteed high returns and lucrative recruitment bonuses.
Bitcoin Core Changes Security Policy as AI Makes Bugs Easier to Find
In core software development, the Bitcoin Core project is fundamentally altering how it handles the disclosure and patching of security vulnerabilities, driven largely by the rapid capability of large language models to uncover software bugs.
Antoine Poinsot, a prominent Bitcoin Core developer, explained that historically, newly discovered vulnerabilities were subjected to lengthy disclosure embargoes. This practice was designed to give node operators and exchange infrastructure providers adequate time to upgrade their software before technical details became publicly known.
However, Poinsot noted that modern AI tools have advanced to the point where they can rediscover certain code flaws almost instantaneously once a hint or structural change is made public, rendering lengthy embargo windows ineffective. Because the embargo period no longer achieves its protective purpose while unnecessarily delaying the deployment of fixed software releases, the development team is officially updating its disclosure policy to adapt to the realities of automated vulnerability discovery.
Pentagon Bans US Forces From Using Military Info to Bet in Prediction Markets
In national security and regulatory developments, United States Defense Secretary Pete Hegseth issued a strict directive barring all Department of Defense personnel from utilizing nonpublic military information to place wagers on prediction market platforms such as Kalshi and Polymarket.
In an official memorandum distributed to senior military leadership and defense agencies, Hegseth mandated that all personnel are strictly prohibited from engaging in financial transactions or betting activities that rely on undisclosed operational information, encompassing both classified and sensitive unclassified data. The policy aims to eliminate potential conflicts of interest and prevent individuals with access to privileged government insights from capitalizing on impending military or geopolitical events.
